Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3332203d3e20323638333533.roa
File: 34352e3233392e35322e302f32322d3332203d3e20323638333533.roa (raw, json)
Hash identifier: oXAidIStYuvsKe7IKRL94ir6wRdQTmodwBB6Ta01DIk=
Subject key identifier: 8D:BD:7C:D1:4C:19:FB:4E:28:71:BD:37:2B:CD:62:DF:CB:6D:D1:FC
Certificate issuer: /CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
Certificate serial: 23AE66DF8AB45A3F924127DB768AF4674A4FE947
Authority key identifier: 8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3332203d3e20323638333533.roa
Signing time: Tue 25 Feb 2025 21:44:29 +0000
ROA not before: Tue 25 Feb 2025 21:39:29 +0000
ROA not after: Tue 24 Feb 2026 21:44:29 +0000
asID: 268353
IP address blocks: 45.239.52.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ae:66:df:8a:b4:5a:3f:92:41:27:db:76:8a:f4:67:4a:4f:e9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
Validity
Not Before: Feb 25 21:39:29 2025 GMT
Not After : Feb 24 21:44:29 2026 GMT
Subject: CN=8DBD7CD14C19FB4E2871BD372BCD62DFCB6DD1FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:19:b2:e5:24:72:ef:7b:45:f2:03:2e:ff:
f9:98:bc:d7:db:9c:3f:6a:60:49:a2:7a:fa:01:40:
fa:45:9d:2d:1b:4d:b5:00:2a:69:0f:5a:4a:ba:31:
5c:0d:d6:ac:bf:8d:fb:f0:35:0c:fa:f6:c9:fe:79:
39:a4:09:6d:75:6d:bf:dc:64:76:09:8e:ee:6e:ad:
c0:3c:93:8c:6f:30:43:c4:65:82:1b:50:5b:f2:97:
dd:c5:06:e3:80:74:02:cd:64:87:0a:99:94:16:11:
fb:1b:dc:96:77:db:c6:4e:10:60:56:2a:a3:aa:08:
c6:2c:ef:eb:6b:e6:d9:d2:00:70:37:0a:a9:40:82:
66:2f:84:ff:f7:a0:99:37:15:2e:90:0e:bf:ad:ed:
09:bd:e8:b9:5f:23:16:81:c1:f5:e3:8f:e2:21:0d:
5f:12:1c:e9:ca:33:dd:50:b3:87:94:bd:9c:2e:26:
99:8d:18:8d:9a:53:94:11:0f:67:0f:f3:ce:a7:8a:
07:21:db:78:ee:5d:ba:ec:ab:e3:9c:fc:88:81:02:
4c:91:2c:2f:3c:35:76:f9:25:27:42:f3:fd:90:bd:
63:6c:e2:33:d5:ac:6f:c4:28:ad:5e:7d:a9:05:e8:
07:75:7e:d2:81:d5:5f:ae:c5:8a:eb:0a:3f:d1:68:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:7C:D1:4C:19:FB:4E:28:71:BD:37:2B:CD:62:DF:CB:6D:D1:FC
X509v3 Authority Key Identifier:
keyid:8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3332203d3e20323638333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:cd:32:f6:4f:df:5f:d1:c8:09:02:97:7e:f3:e6:2b:ed:2d:
23:e3:6e:66:32:08:fc:6c:1e:b4:5c:74:8a:d1:13:1c:de:16:
a8:b7:a6:f3:10:0c:4a:8c:be:5c:d2:0d:dd:d0:cb:f9:23:1c:
6f:39:60:51:09:7b:19:6f:5f:54:34:37:08:4a:76:ec:20:32:
5c:89:96:81:48:52:9d:39:80:d0:0e:4d:6b:12:d1:bd:63:26:
6d:cd:3e:ab:80:74:04:3c:1a:ad:b7:d9:42:72:ec:1e:f3:1e:
4b:62:7b:1b:68:3d:ef:8a:1a:94:ca:59:3c:a2:3d:1e:fe:5e:
b4:36:16:1c:c1:23:77:d4:cc:7f:1c:b4:bc:d5:30:83:72:20:
49:70:e0:2c:62:e0:15:85:d9:9a:4a:4e:3a:d9:d0:a1:5d:3c:
c0:31:4c:6a:36:af:27:eb:f5:9e:15:f1:cb:92:2e:85:c3:73:
3b:c7:54:bd:c8:e9:cb:50:18:8d:96:ca:86:ed:70:12:35:27:
ab:a9:ec:00:3f:94:71:66:82:0f:a9:39:a0:89:f8:06:2b:6f:
72:35:67:0b:3c:e2:4b:2e:4e:39:1b:27:d6:3f:20:b2:80:d8:
c9:e6:30:e6:29:2b:f1:0b:a3:0f:49:f1:c1:5b:8f:49:69:9b:
1e:d8:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:51:51 2025 by rpki-client